$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144236.roa File: AS144236.roa (raw, json) Hash identifier: A9pIr39iVwPbKd5LVP/pu84k7H/qH8eMHxHa9+1nedo= Subject key identifier: 5B:2C:CC:62:91:30:C1:24:FC:47:39:23:54:C7:32:23:41:5F:68:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1F937D74F24A6A71DDB9FB317644A4513387DDFF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144236.roa Signing time: Wed 04 Mar 2026 06:14:42 +0000 ROA not before: Wed 04 Mar 2026 06:09:42 +0000 ROA not after: Wed 03 Mar 2027 06:14:42 +0000 asID: 144236 IP address blocks: 240a:a632::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:93:7d:74:f2:4a:6a:71:dd:b9:fb:31:76:44:a4:51:33:87:dd:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:42 2026 GMT Not After : Mar 3 06:14:42 2027 GMT Subject: CN=5B2CCC629130C124FC47392354C73223415F6815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:80:71:48:5d:ef:1a:14:d4:9d:41:ef:7a: 21:c1:77:4c:ab:22:21:c3:81:59:a9:da:0f:6a:bb: 33:ec:0a:dd:87:20:1a:4d:9f:0b:10:90:45:66:6d: 28:8f:bc:a6:f7:6d:88:4a:88:1b:78:5b:b9:5d:f6: 35:45:ae:77:9d:f2:23:8e:5c:52:f0:ab:16:69:cd: 25:7e:dd:6c:e3:29:db:61:fa:be:4b:94:48:9d:36: 9b:1b:d1:ad:be:e5:fc:b8:78:ca:0a:c9:42:fd:08: 1d:d9:9f:6e:0e:36:49:b4:59:f9:f7:7f:e8:6f:e5: 12:9f:1a:8b:e2:db:a1:a5:36:0a:e1:fc:33:41:70: fb:68:5c:0f:ea:bf:8f:cb:8b:2b:82:51:fb:f7:42: 4c:34:7d:31:c5:08:dd:a7:37:11:5a:ee:2b:7f:49: b9:58:3f:53:a9:16:b0:87:b1:04:3f:bd:a6:03:34: 5c:ed:a3:22:2f:68:4e:44:54:bb:85:7a:8c:bb:fb: 45:1d:d4:0b:97:ef:2d:c6:dc:77:16:28:2d:a0:a5: f7:86:4c:d0:b9:26:a6:4a:28:4f:ae:e0:09:9d:7c: 47:4a:8e:b1:46:9a:59:c2:c7:9a:ce:c8:08:d6:98: 26:8b:29:e0:45:91:a3:fe:94:87:f8:1b:bb:83:94: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2C:CC:62:91:30:C1:24:FC:47:39:23:54:C7:32:23:41:5F:68:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a632::/32 Signature Algorithm: sha256WithRSAEncryption 8b:40:92:78:ad:e0:44:f5:67:64:69:3d:3a:66:1a:81:ef:0a: d7:a9:b8:2e:c8:55:26:ef:0c:fc:4a:54:96:1e:1a:38:9c:83: 27:88:1f:f7:c9:30:42:53:08:b5:dc:46:78:b9:7a:1c:ac:9e: b3:99:31:42:b7:2d:6c:97:92:05:87:e0:61:5f:db:ca:22:89: c1:97:ab:97:c0:90:9c:d3:e9:e0:87:5c:f7:17:6c:2d:d2:e8: dd:f0:88:4a:2b:12:50:a0:3f:b4:06:d9:8e:d2:3c:3e:c9:cb: e9:33:ff:61:48:95:e6:ff:34:12:32:42:4e:7c:ac:49:67:99: cc:1b:cf:ea:f1:12:7d:a6:59:a4:1e:c7:17:d9:fb:8d:9f:5f: e3:7c:45:be:f4:99:d3:61:11:99:93:80:c4:15:a3:ee:a5:4e: 91:40:d0:9d:59:5e:64:6d:90:06:96:99:7d:da:3d:09:82:96: b6:0d:af:9c:83:cb:a1:33:d3:b0:e5:e2:dd:c9:1d:da:1f:01: c2:56:ed:3c:da:0f:ac:e0:b7:75:50:92:fe:cf:1e:3b:73:60: 6b:f9:56:14:7e:bd:24:27:72:6f:d4:c0:7e:d2:b4:be:40:62: 54:1c:7a:8d:45:b4:cd:ed:03:8b:77:38:b7:56:02:d0:27:cb: fd:f3:cf:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH5N9dPJKanHdufsxdkSkUTOH3f8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0MloX DTI3MDMwMzA2MTQ0MlowMzExMC8GA1UEAxMoNUIyQ0NDNjI5MTMwQzEyNEZDNDcz OTIzNTRDNzMyMjM0MTVGNjgxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANY5gHFIXe8aFNSdQe96IcF3TKsiIcOBWanaD2q7M+wK3YcgGk2fCxCQRWZt KI+8pvdtiEqIG3hbuV32NUWud53yI45cUvCrFmnNJX7dbOMp22H6vkuUSJ02mxvR rb7l/Lh4ygrJQv0IHdmfbg42SbRZ+fd/6G/lEp8ai+LboaU2CuH8M0Fw+2hcD+q/ j8uLK4JR+/dCTDR9McUI3ac3EVruK39JuVg/U6kWsIexBD+9pgM0XO2jIi9oTkRU u4V6jLv7RR3UC5fvLcbcdxYoLaCl94ZM0LkmpkooT67gCZ18R0qOsUaaWcLHms7I CNaYJosp4EWRo/6Uh/gbu4OUR2ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRbLMxi kTDBJPxHOSNUxzIjQV9oFTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pjIwDQYJKoZIhvcNAQELBQADggEBAItAknit4ET1Z2RpPTpmGoHvCtepuC7IVSbv DPxKVJYeGjicgyeIH/fJMEJTCLXcRni5ehysnrOZMUK3LWyXkgWH4GFf28oiicGX q5fAkJzT6eCHXPcXbC3S6N3wiEorElCgP7QG2Y7SPD7Jy+kz/2FIleb/NBIyQk58 rElnmcwbz+rxEn2mWaQexxfZ+42fX+N8Rb70mdNhEZmTgMQVo+6lTpFA0J1ZXmRt kAaWmX3aPQmClrYNr5yDy6Ez07Dl4t3JHdofAcJW7TzaD6zgt3VQkv7PHjtzYGv5 VhR+vSQncm/UwH7StL5AYlQceo1FtM3tA4t3OLdWAtAny/3zz58= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:32 2026 by rpki-client